From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.saout.de ([127.0.0.1]) by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0kVDS9UhpadQ for ; Sun, 21 Jul 2013 11:06:23 +0200 (CEST) Received: from gerolde.archlinux.org (gerolde.archlinux.org [66.211.214.132]) by mail.saout.de (Postfix) with ESMTP for ; Sun, 21 Jul 2013 11:06:23 +0200 (CEST) Message-ID: <51EBA35A.8000602@archlinux.org> Date: Sun, 21 Jul 2013 11:01:14 +0200 From: =?ISO-8859-15?Q?Thomas_B=E4chler?= MIME-Version: 1.0 References: <51EAEDB4.1090407@gmail.com> <51EB746A.3020600@kadzban.is-a-geek.net> <51EBA015.10409@gmail.com> In-Reply-To: <51EBA015.10409@gmail.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="----enig2RPAKDUACXMBCNKALRXSG" Subject: Re: [dm-crypt] ing rootfs without initramfs List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Milan Broz Cc: dm-crypt@saout.de, ebelcrom ebelcrom , Bryan Kadzban This is an OpenPGP/MIME signed message (RFC 4880 and 3156) ------enig2RPAKDUACXMBCNKALRXSG Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable Am 21.07.2013 10:47, schrieb Milan Broz: > I think using some initramfs is the only solution now for mapping > encrypted root fs (for now). I would remove "for now" from your statement. Unlocking the volume from kernel code itself requires that the kernel learns how to ask for passphrases and/or find key files, do LUKS header processing and accept device-mapper parameters in some way. This is very complicated to do in kernel code and adds tons of kernel code for tasks that do not belong into the kernel. Such patches will never be accepted upstream, since there is a more flexible and less error-prone mechanism to solve the problem (it's called "initramfs", if you didn't guess it already). ------enig2RPAKDUACXMBCNKALRXSG Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJR66NdAAoJEChPw0yOSxolaB4P/RDFLLv9X2DERlr2JSjqcjyT kwLm5B9487fFDAzvPT3yXIhwx63TPeNKWteUEzan8HGRHDToNc1/i3GALViFaGrM UFaWqQAU0oDGg0rDOm1zTVNXUZ2W4EQz9w2gEzZ665L9vzzi1FoWNG1eINmZn/Eh swVQxNUmihOiEBJtRs6axN59YTnjPdIUPgTvtOrYxdVDEOpQoiQDFzLtJ+cckpTD DD/DFFc+0kTrLnHWhKe+ZOWDPzPVNs6qPgzVEja+L6trKBQBdFv+/uFgRvLsUIRl PDRLVJ4Ep6NKxbH/k3WouirSDOrgei/i9MfZ4ty2alid97cgdAxSFjDEY6qRwpZT S//FcyP7RyukcIZcH31AEAxK3jTt73rzO7HKN8Gn+C79m0FEleNfuVvwRTXkZFuz Ig5rPeD4v/L6yOannHccTen5z+qspQ5LtN+9Oz/pz05riMpQ4ey8FA0NQnWBEhlD PThnMft/EuI7MpjavhzpxQXqE6Ew4dTlq5lEyDoDaHKxfHcXuqkTrgiPBJDfvW9A OTlkOwTrUtP6ShksKbLldExd0YXV4pjUmC7MuaNyU+0Lwga3XBw4WNXfJK3MKX/c hM5MFoVno3Sqtok5Bfo7d4R/Z0hDkYjCcbLklsdG42N0oeYI3rgYWfZ5pEOJC3mT WCKB+lEmOdOapKIz8QWC =imFj -----END PGP SIGNATURE----- ------enig2RPAKDUACXMBCNKALRXSG--